Who we are

Ingeus Ingeus UK Limited is a private limited company registered with Companies House, company no. 04320853.  Second Floor, 66-68 East Smithfield, Royal Pharmaceutical Building, London E1W 1AW. We are registered with the Information Commissioners Office Z804306X. 

We are all about people, delivering services that make a positive, lasting difference to people's lives, including employment and health programmes, services for young people, training and skills support, and support for people in the justice system. Our mission is to enable better lives.  

When you use the services of Ingeus UK Limited, you may provide us with your Personal Data. We only collect data to administer your interaction with us.

How we secure your data  

Ingeus implements industry leading controls to ensure that information is secure. We are accredited to the information security standards ISO27001:2002 and Cyber Essentials Plus. All staff are required to pass Baseline Personal Security Standard (BPSS) and complete data security training when the join the business, then at least annually.   

What is the Access to Work Mental Health Support Programme 

The Access to Work Mental Health Support programme (AtW MHSS) is delivered through the Access to Work programme – a Jobcentre Plus discretionary grant scheme, and is an essential element of the Department for Works and Pension’s (DWP) support to individuals with a mental health condition, to stay in work, or to move to more suitable work. The AtW MHSS programme provides support by assisting individuals to overcome work related obstacles. 

The AtW MHSS also offers advice and guidance to employers on how best to support employees with a mental health condition or issue, and help resolve practical and organisational factors related to the work environment. 

By collecting information from you, Ingeus UK Limited and our Delivery Partners can better identify your individual needs and how best to support you on the programme. 

Our Delivery Partners are: 

  • Health 2 Employment (i2i), 
  • Case UK 
  • The Better Health Generation.

What personal information do we process 

  • Name – to identify you 
  • Date of birth – to identify you; for equality and diversity monitoring   
  • Email Address – to keep in contact with you 
  • Telephone Number – to keep in contact with you 
  • Sex – for equality and diversity monitoring  
  • Family circumstances 
  • National Insurance Number – to identify you 
  • Health information – to support delivery of the service 
  • Information regarding your employment – to support delivery of the service 

For the purposes of processing your data: 

  • Ingeus UK Limited and Department of Work and Pensions (DWP) are Data Controller/Joint Data Controller/Data Processor for the processing of your personal data in relation to the ATW MHSS programme. 
  • Ingeus is the Data Controller for any Health data that you provide directly to us. 

How we use your information 

Ingeus UK Limited processes your information in order to provide you with the best possible support whilst on the programme, and to meet the requirements of our contracts and other legal obligations. We cannot process your information without having a valid, lawful reason for doing so.  

In order to start you on the programme and arrange your first appointment we will receive from ATW MHSS information including name, occupation, date of birth, National Insurance number, contact details and further information about your health and wellbeing. 

  • During your initial meeting you will be asked questions that allow your Mental Health Coach (MH) to assess the level of support you require. Your MH will make some notes about how you are doing while you are on the programme and what has been discussed during your appointments. 
  • Some of this information may be shared with others, such as your GP, but with your consent. 
  • We also have to pass on information to the DWP where our contract with the DWP requires this. 

We also utilise your information for performance evaluation purposes. 

Lawful Basis for processing your Personal Data 

The law on data protection sets out a number of different reasons for which businesses may collect and process your personal data. These are detailed below.  

1.    To meet our contractual obligations with DWP  

2.    To meet our legal obligations 

In some circumstances we are required to pass on details to  

  • Law enforcement when asked to support an active criminal investigation  
  • HMRC or DWP in instances where fraud is suspected   
  • Emergency services or your GP to assist you or to provide emergency response in high-risk situations.  
  • Meet our obligations under safeguarding (children and vulnerable adults) or Prevent legislation  

3.   Because we have a legitimate interest  

In order for us to provide the services to you we will need to collect, process and retain your personal information.

Sharing your Personal Information 

The aim of this programme is to help you to remain in work or to move to more suitable employment. During your meetings, your MH may feel that your GP/Health Practitioner, may not have the full picture about your condition, and may want to write to them so that they are better equipped with information to provide you with the support you need. With your consent, the MH might contact your employer to discuss the obstacles you are experiencing and provide guidance to them as to how they can support you. 

Routine Sharing 

We routinely share your personal data with the following organisations to update them on your progress, including whether you have completed the programme, achieved any key milestones or left early, or to provide additional support to you. 

  • Department of Work and Pensions – Ingeus UK Limited will share information with the DWP who have commissioned the AtW programme. Our contract with the DWP stipulates what information is to be shared, the manner in which it is to be shared and the information security requirements that must be adhered to. 
  • Direct Delivery Partners – Your information may be shared with an organisation that is contracted to deliver the program on our behalf in your area. In order to share this information, we have legal contracts in place with those organisations, which state how your personal information is to be securely processed.

Research and evaluation 

Ingeus UK Limited pride ourselves on continuously improving the services provided to you and others. We identify areas for improvement by conducting research and evaluating the effectiveness of our existing services. One way in which we do this is to convert your personal data into statistical or aggregated data, which is then used to produce statistical research and reports. This information is sometimes shared with the DWP and other research organisations, however, it cannot be used to identify you. 

We sometimes commission other organisations to carry out research on our behalf. Where your personal data can be identified or we would like you to provide additional information, via focus groups or feedback forms, we will always ask your permission first. 

Consent 

Where we need your agreement to process your information, for example, contacting your employer, we will ask you to give your consent first. We will explain why your consent is needed and the information that we will share. This information will be provided verbally or or in written form. Where consent is given by you, this will be recorded on our systems for tracking and audit purposes. 

Right to Withdraw Consent 

Where you have consented for us to share your information, for example, with your GP or Employer, you have the right to withdraw your consent at any time. Should you wish to withdraw your consent, please speak to your MH who will update our records. 

Keeping your information 

Ingeus UK Limited and our Delivery Partners are required to retain your information as part of our contractual and legal obligations. We will not retain your information for any longer than is necessary. Where we are no longer required to keep your information, it will be safely and securely destroyed. Your data will be retained until 1st January 2030. 

Your Data Rights 

  • The Right to Access 

You have the right to access the information that Ingeus UK Limited holds about you. You can reasonably expect to receive the information we hold about you within 30 calendar days of us verifying your request. Please note – we provide information in readily accessible digital formats such as msg, xlsx, pdf, docx, jpeg, pptx.      

  • The Right to Data Portability 

You have the right to move, copy or transfer the Personal Data we hold from one IT environment to another in a safe and secure manner. Please be aware, this only relates to electronic information and not paper files. 

  • The Right to Rectification 

You have the right to correct any personal information that we hold that may be incorrect.  

  • The Right to Object to Processing 

This right allows to you to stop Ingeus UK Limited using your Personal Data at any time for purposes such as direct marketing. Please note, there are exceptions to this right.   

  • The Right to Erasure (Right to be Forgotten) 

In certain circumstances, you can ask us to erase any personal data that we hold.  

Please note – The right of erasure is not an absolute right. We will assess every request in accordance with ICO guidance and based on its individual circumstances. We can legally decline a request if the data is still required to meet legal or contractual obligations or if it is still required for the reasons it was originally collected it i.e. to deliver the service. We will make you aware of any issues that may arise when you access this right. We will also consult with our commissioners when making a decision.  

  • The Right to Restriction of Processing 

You have the right to restrict the processing of your Personal Data. This means you can limit the way we process your information in certain circumstances.  

To access any of these right or have any queries, then please contact us at dataprotectionofficer@ingeus.co.uk. In accordance with ICO guidance, we will ask to verify your identity before we enact your data rights. 

Contact Us  

We always want to make sure that we as an organisation, are as transparent as possible. However, if you do have any questions, please don’t hesitate by contacting us:  

  • by email: dataprotectionofficer@ingeus.co.uk  
  • or by post to this address:  
    The Data Protection Officer 
    Ingeus UK Limited  
    Second Floor 
    66-68 East Smithfield 
    Royal Pharmaceutical Building 
    London 
    E1W 1AW   

You have the right to escalate any concerns you may have about our data processing with the ICO. They can be contacted through their website www.ico.org.uk.

This Privacy Notice was last reviewed on the 31st January 2026.